The current apache ldap documentation explains that apache first looks up in the directory before performing an bind.

Sometimes it would be much easier if one can just tell apache "take this dn, add the supplied user name there, and there you go". Any ideas how to do that?